<?xml version="1.0" encoding="utf-8"?>
<network-security-config>
    <!-- Allow cleartext traffic to local/development server -->
    <domain-config cleartextTrafficPermitted="true">
        <domain includeSubdomains="true">localhost</domain>
        <domain includeSubdomains="true">127.0.0.1</domain>
        <domain includeSubdomains="true">100.72.13.62</domain>
        <domain includeSubdomains="true">192.168.1.100</domain>
    </domain-config>

    <!-- Require HTTPS for all other domains (production) -->
    <domain-config cleartextTrafficPermitted="false">
        <domain includeSubdomains="true">*.mysportmanager.ie</domain>
        <domain includeSubdomains="true">mysportmanager.ofsoftware.ie</domain>
    </domain-config>
</network-security-config>
